Azure Cloud Engineer

Azure Cloud Engineer, 160k plus bonus, Mid Sized Firm , Parsippany, Hybrid Schedule

US CITIZEN OR GREEN CARD ONLY

NO C2C, NO CORP TO CORP

MUST HAVE STRONG SCRIPTING, POWERSHELL, IAM

5 PLUS YEARS AZURE

3 DAYS ON SITE

• Design and architect end-to-end Azure infrastructure solutions aligned with business, security and technical requirements.
• Lead cloud deployment initiatives, and work with the Director of Information Security to secure applications on Azure and other cloud platforms.
• Assist in the development and enforcement of cloud architecture standards, governance frameworks, and best practices.
• Collaborate with infrastructure, endpoint, security, and software engineering teams to ensure scalable and secure infrastructure design and compliance of cloud infrastructure systems.
• Optimize cloud environments for cost, performance, scalability, and reliability.
• Work with infrastructure engineers to implement and secure cloud networking solutions including VNets, VPNs, ExpressRoute, and hybrid connectivity.
• Implement and maintain monitoring and observability across the Azure estate using Azure Monitor, Log Analytics, diagnostic settings, workbooks, and action groups; tune alerting for platform health, performance, capacity, and cost.
• Work with the Director of Security to define and deploy Azure Policy and other initiatives to enforce governance, security baselines, resource tagging, and regulatory compliance; author custom policies and remediation tasks where built-in definitions fall short.
• Minimum 5 years experience designing cloud architecture and contributing to cloud strategy and standards.
• Experience designing and supporting Azure infrastructure (IaaS, PaaS, networking, and identity).
• Experience using Azure Monitor, Log Analytics, and related tools to monitor and troubleshoot platform health.
• Experience implementing governance and compliance controls using Azure Policy and related standards.
• Familiarity with best practices for securing cloud infrastructure and applications.
• Experience administering Entra ID, including Conditional Access, Privileged Identity Management (PIM), and passwordless authentication (FIDO2 / YubiKey).
• Experience delivering infrastructure as code using Bicep, Terraform, or equivalent tools.
• Proficiency with PowerShell scripting and automation, including Microsoft Graph SDK.
• Strong Windows Server administration skills and experience supporting hybrid environments.
• Experience administering Active Directory and Group Policy in an enterprise environment.
• Experience supporting Microsoft 365 services such as Exchange Online, Teams, SharePoint, and Intune.